Experimental quantum key distribution with active phase randomization 
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Phase randomization is an important assumption made in many security proofs of practical quan- 
tum key distribution (QKD) systems. Here, we present the first experimental demonstration of 
QKD with reliable active phase randomization. One key contribution is a polarization-insensitive 
phase modulator, which we added to a commercial phase-coding QKD system to randomize the 
global phase of each bit. We also proposed a simple but useful method to verify experimentally that 
the phase is indeed randomized. Our result shows very low QBER (< 1%). We expect this active 
phase randomization process to be a standard part in future QKD set-ups due to its significance 
and feasibility. 



Quantum key distribution (QKD) allows two authenti- 
cated parties to share a secret key [Ij, [2| . The security of 
this secret key has been rigourously proven to be uncon- 
ditional [s*]. Experimentally, people have demonstrated 
QKD over 175km optical fibre [1]. Moreover, commercial 
QKD systems are now available 0]. 

How secure are these implementations of QKD? The 
security proofs [3,] rely on several assumptions. A fre- 
quently used one is that Alice (the sender) has a perfect 
single photon source. However, most QKD experiments 
use heavily attenuated coherent laser sources due to the 
great challenge to build a perfect single photon source 
[1) 0, Hi • This substitution causes some security concern 
(like the photon- number-splitting attack Q) though, the 
security for QKD using weak coherent state is still prov- 
able [lo, El ■ Recent study shows that by introducing de- 
coy states, the signals can be rather strong without jeop- 
ardizing the security ^[11, [3. QKD with decoystates 
has been experimentally demonstrated recently [l5|. 

The assumption of single photon source was removed 
at the price of introducing another assumption: the phase 
of the quantum signal is uniformly random [l^. El 
[H, Eind thus is inaccessible to the eavesdropper. It 
has been shown that phase randomization of the quan- 
tum signal is a crucial security requirement rather than 
a tricky assumption [l6'|. The existing security proofs 
of non-randomized phase QKD \17j are all at a price of 
comprising performance. Particularly, they cannot be 
applied to the security proof of decoy state QKD. 

QKD experiments with intentionally randomized 
phase have never been reported. Here we remark that 
the quantum signals sent by Alice are not "naturally" 
phase-randomized. For example, in uni-directional QKD 
system, strong ancillary pulses (sometimes called refer- 
ence pulses) are often used for feed-back control to stabi- 
lize the asymmetric Mach-Zehnder interferometer (MZI) 
The phase of such strong classical pulses could be 
(in principle) accurately measured, leaking the phase in- 
formation to the eavesdropper. Even if weak signals are 
used, the phase coherence of the laser source could main- 
tain for many emissions of weak signals, which makes 
it possible to measure the phase accurately. For bi- 
directional system ("plug & play" system) classical 



pulses sent from Bob cause the same problem as the 
strong ancillary pulses in uni-directional system do. 

Active phase randomization in real QKD system is 
challenging: the phase modulator should be polarization 
insensitive; this extra phase modulator has to be care- 
fully synchronized with the original system to randomize 
the phase in real-time; since the output from Alice is very 
weak (~ 0.1 photon per pulse), it is not straightforward 
how to verify that the phase is indeed randomized; the 
phase randomization must not increase the quantum bit 
error rate (QBER) significantly. 

In this paper, we will present the first QKD experiment 
with reliable active phase randomization. Our implemen- 
tation is based on a modified commercial "plug & play" 
system [s^. The global phase of each bit is randomized 
by an additional phase modulator, after which the bit 
is sent to Bob. This phase modulator is designed to be 
polarization-insensitive. Therefore neither polarization- 
maintaining fiber nor dynamic polarization control is nec- 
essary. Our result shows that the phase difference be- 
tween adjacent signals has been confidently randomized 
by this phase-randomization phase modulator, while the 
relative phase between the two pulses of the same signal 
is solely determined by Alice's coding phase modulator. 
We expect phase randomization to become a standard 
part in future QKD systems due to its security signifi- 
cance [13, El [mi and feasibility shown in this paper. 

The schematic of our set-up is shown in FIG. [T] The 
original QKD system works as follows: Bob generates a 
frame of laser pulses at 5MHz repetition rate; each pulse 
is splitted into two by the asymmetric MZI; the one prop- 
agates through the shorter arm is called the reference 
pulse, and the one propagates through the longer arm 
is called the signal pulse; the insertion loss of the phase 
modulator (<I>b in FIG.[T|) makes the signal pulse weaker 
than the reference pulse. The state of the ith bit emit- 
ted from Bob is |ai)|/3i), where \ai) denotes the reference 
pulse and denotes the single pulse. Pulses are sent 
to Alice and are reflected by the faraday mirror (FM in 
FIG. [1] upper chart); Alice encodes the quantum infor- 
mation by modulating the phase of the signal pulse with 
her phase modulator (<I>a in FIG.[T]); the pulses are then 
attenuated to single photon level and sent back to Bob. 
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FIG. 1: Upper Chart: Schematic of the experimental set-up in 
our system. Inside Bob/Jr. Alice: components in Bob/Alice's 
package of id Quantique QKD system. Our modifications: 
$pi: polarization-insensitive phase modulator (detailed struc- 
ture shown in lower chart); FG: functional generator. Orig- 
inal QKD system: LD: laser diode; APD: avalanche photon 
diode; <l>i: phase modulator; PBS: polarization beam split- 
ter; PD: classical photo detector; FM: faraday mirror. Lower 
chart: Detailed structure of the polarization- insensitive phase 
modulator. ISL: optical isolator; FG: 2x2 Fiber Goupler; $: 
electro-optical modulator; FM: faraday mirror. Solid line: 
SMF28 single mode optical fiber; dashed line: electric cable. 



The State sent from Alice to Bob is |a^}|/3^e"^^'). Bob de- 
codes the quantum information by modulating the phase 
of the reference pulse with his phase modulator ($b in 
FIG.[T]) and letting the two pulses interfere at the coupler 
before sending the next frame of pulses. 

Alice should modulate the global phase of each signal 
with an extra random value to implement phase ran- 
domization, i.e., the state emitted from Alice should 
be |a^e''^')|/3,'e*('^'+'^^')), where 0, should be a random 
value for each bit as shown in FIG. O (upper chart). The 
birefringence of optical fiber makes the polarization of 
laser unpredictable and changing frequently. Therefore 
the phase modulator should be polarization insensitive. 

There have been several proposals on polarization- 
insensitive phase modulators, based either on liquid crys- 
tal (LC) j^] or on acousto-optic modulator (AOM) [T^. 
LC-based phase modulators require sophisticated fabri- 
cation, and AOM-based phase modulators cannot meet 
the repetition rate of the laser source (5MHz). Therefore 
we need to design another polarization-insensitive phase 
modulator, which consists of commercial parts and can 
work at several megahertz. 

Our design of phase modulator is shown in FIG. [1] 
(lower chart). It can be easily shown that the phases of 
both vertically- and horizontally-polarized components 
of incoming light are modulated by propagating through 
the phase modulator (<& in FIG.[T1 lower chart) twice and 
the 7r/2 polarization rotation due to the faraday mirror 
(FM in FIG.m lower chart). 

The synchronization signal from the photo detector 
(PD in FIG. [T|) will trigger the functional generator (FG 
in FIG. d]) when the pulse frame enters Alice. The 
functional generator will hold for a time period before 
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FIG. 2: Upper chart: correctly implemented phase random- 
ization. A different random phase is applied on each bit. 
Lower chart: phase modulation for incorrect implementation: 
signal pulse and reference pulse are modulated by different 
phase and thus we could expect QBER to be around 50%. 
Right Ghart: differently polarized components of the same 
pulse are modulated at different moments. 



outputting a pre-loaded uniformly random voltage pat- 
tern (generated by id Quantique quantum random num- 
ber generator) to drive the polarization-insensitive phase 
modulator to randomize the phase of each bit. This phase 
modulation extends to the full range of [0, 27r] with am- 
plitude resolution of 12 bits as limited by the functional 
generator. The linearity of electro-optical effect [20] guar- 
antees that the phase applied on each bit is also uniformly 
random. In our set-up, the frame length is 504 pulses. 

This phase randomization process does not affect the 
performance of QKD system. The phase modulator ap- 
plies the same phase shift to both pulses of the same 
bit as shown in FIG. [2] (upper chart). Therefore the 
QBER should not change. Moreover, since this extra 
phase modulator is in Alice's side, we can set the output 
intensity from Alice arbitrarily. Thus it does not affect 
the gain. This is good news because the QKD system 
will not pay any price on performance for randomizing 
the phase. However, it leaves us a problem: how can we 
see that the phase is reliably randomized? 

Our answer is to shift the delay time of the functional 
generator (FG in FIG. [T]) so that the two pulses of the 
same bit are modulated differently, as shown in FIG. 
(lower chart) . The relative phase between the two pulses 
is then uniformly random, and we should observe a sharp 
increase of QBER to around 50%. 

We shift the delay time for ±0.2/is, i.e., a range of two 
periods of the QKD system, at a step of 10ns (larger 
step is used for the flat area). The result is shown in 
FIG. [21 We can see clearly that when the two pulses of 
the same bit are modulated equally as in FIG. [2] (upper 
chart), the QBER is indeed low (< 1%), as the central 
flat part in FIG. [31 This conflrms our prediction of low- 
QBER. However, when the delay time is shifted to the 
value that the two pulses are modulated differently (as in 
FIG.m lower chart), the QBER would increase to around 
50% as the two spikes in FIG. [31 show. The fluctuation 
is only ±0.5% (which is within one standard deviation) 
from the expected value of 50%. 

We surprisingly found a "waist" on each slope of the 
spikes, making the slopes neither sharp nor smooth. The 
explanation we found is that the vertically- and the 
horizontally-polarized components of a pulse are modu- 
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FIG. 3: QBER versus delay time. Alice sent 843k bits with 
0.1 photon per bit on average for each point in this diagram. 
QBER at t=0/^s is surprisingly low (<1%), and is comparable 
to QBER at t=±0.2^ts. 



lated at different time: one is modulated when the pulse 
propagates toward the faraday mirror (FM in FIG. [l] 
lower chart), and the other one is modulated when the 
pulse is reflected back as shown in FIG. (right chart). 
This time difi^erence makes it possible that the phase 
modulation applied on the two components are differ- 
ent when we shift the modulation time gradually. This 
modulation difference will increase the QBER to a value 
between a few percents to 50%, depending on the polar- 
ization of the pulse. 

The fiber connecting the phase modulator ($ in FIG. 
(TJ lower chart) and the faraday mirror (FM in FIG. [1] 
lower chart) is roughly 2m. Therefore the time differ- 



ence between the modulation of the vertically- and the 
horizontally-polarized components is roughly 20ns. If the 
modulating phase changed within this 20ns, the QBER 
would be between a few percent to 50%, forming a waist. 
The waist in FIG. [3] has two points. This result is ex- 
pected recalling that the step of time shift is 10ns. 

Our implementation is over 5km of telecom fibre. We 
address that phase randomization itself does not limit 
the transmission distance. It is the low intensity of the 
laser source (LD in FIG.[T|) in our system that limits the 
transmission distance [21]. Transmission distance can be 
easily extended by using a brighter laser diode. 

In summary, we have performed the first QKD ex- 
periment with reliable active phase randomization. Our 
result shows the global phase of quantum signal is uni- 
formly random. An important assumption in many QKD 
security proofs — phase randomization — is thus imple- 
mented with confidence. A potential security loophole 
is blocked. We expect phase randomization to become a 
standard part in future QKD systems due to its signifi- 
cance in security (lOl IllL Il6| and its feasibility. 
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